It would be very beneficial to be able to establish who can and cannot view or otherwise access uploaded documents and files based on their role(s).

For instance, I would like to manage my user documentation and administrative documentation for each project. But the administrative documentation often has information that should not be made accessible to my general users.

As a workaround, I can create a new sub-project with a subset of members to house the more sensitive documentation, but it would be great if this step was unnecessary.

The same is true for files. If I generate an Excel dashboard that contains sensitive information, I have to either track it outside of Redmine or create a sub-project just to house a file or two.

As an aside, the same logic holds true for many things, but I saw that there was already a suggestion for issue permissions, and I think there is already a plugin for Wiki-specific permissions.